The vulnerability lies in the get‑view‑only‑bundle RPC call, which, when invoked without proper authorization, returns every share‑link record for a file. An attacker exploiting this can collect the secret IDs, page scopes, and permission settings of links that the requester is not entitled to. By replaying a more permissive token, the attacker can then access page data and features that were outside the original share’s scope, effectively bypassing the intended access restrictions.

Penpot, the open‑source design and prototyping platform, is affected in all releases before version 2.18.0. The issue is fixed in the 2.18.0 release and later.

The CVSS score of 5.3 indicates moderate severity. EPSS data is not available, so the current likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote unauthenticated RPC request to the get‑view‑only‑bundle endpoint, which requires no prior credentials and can be performed by anyone who can reach the service.